CVE-2021-24389

PoC —

CVSS 3.1

6.1 medium

EPSS

4%p89

Published

Jul 6, 2021 (Jul 6, 2021)

Modified

Jun 17, 2026

Description

The WP Foodbakery WordPress plugin before 2.2, used in the FoodBakery WordPress theme before 2.2 did not properly sanitize the foodbakery_radius parameter before outputting it back in the response, leading to an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability.

Vendors: chimpgroup
Products: foodbakery
Ecosystems: WordPress
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (3.8%)

In the news0 stories

No ingested article mentions this CVE yet.